You arguably won't get there with a nostr relay. You are trusting TLS at best. SimpleX does give you that advantage tmk. You could require VPN I suppose...